CVE-2020-18243

SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php...

PT-2025-16360

Name of the Vulnerable Software and Affected Versions Enricozab CMS version 1.0 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the "/hdo/hdo-view-case.php" API endpoint. Recommendations For Enricozab CMS version 1.0, consider disabling access to the...

CVE-2020-18243: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php...

PT-2024-26920

Name of the Vulnerable Software and Affected Versions SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description A critical issue was found in the system, affecting an unknown function of the file /control/activate case.php. The manipulation of the id argument leads to S...

PT-2024-26919

Name of the Vulnerable Software and Affected Versions SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description A critical issue has been found in the system, affecting the processing of the file /control/deactivate case.php. The manipulation of the id argument leads to...

Directory traversal

Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the 1 ContactPlus and 2 Reviews modules, and 3 the modulename parameter to...